Manager, CyberSecurity Risk Management
New
J
JobgetherCybersecurity risk management
Remote work opportunities within the United States.Full-TimeManager
SalaryUnited States — San Francisco Bay Area, Washington, D.C. metro area, New York City, and Seattle: $181,600–$272,400 per year. Other U.S. locations and remote positions: $163,400–$245,200 per year.
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 8 years of experience in cybersecurity risk management or governance, risk, and compliance (GRC), including a minimum of 3 years in program or project management.
- Required Skills
- JiraTableauConfluence
Requirements
- At least 8 years of experience in cybersecurity risk management or governance, risk, and compliance (GRC).
- At least 3 years of program or project management experience.
- Demonstrated ability to plan and coordinate cross-functional initiatives, manage dependencies and timelines, estimate effort, monitor deliverables, communicate status, and ensure accountability.
- Experience supporting or scaling a cybersecurity risk management program, preferably in a technology, SaaS, or cloud-based organization.
- Working knowledge of NIST RMF, NIST SP 800-30, NIST SP 800-37, ISO 27005, and COBIT.
- Knowledge of ISO 27001/27002, SOC 2, FedRAMP, NIST CSF, NIST SP 800-53, CIS Controls, PCI DSS, and HIPAA.
- Understanding of cloud security, identity management, network security, and application security.
- Hands-on experience with Jira, Confluence, and Tableau.
- Strong analytical thinking, problem-solving, organization, and attention to detail.
- Ability to translate technical risks into business-relevant insights and influence stakeholders across teams.
- Bachelor's degree in Security, Computer Science, Management Information Systems, or a related discipline, or equivalent practical experience.
Responsibilities
- Coordinate cybersecurity risk assessments, remediation initiatives, timelines, dependencies, and deliverables across teams.
- Conduct enterprise, technical, cloud, application, and third-party risk assessments; evaluate risks, gather evidence, and validate security controls.
- Maintain risk registers, follow up with risk owners, monitor progress, and drive remediation activities through closure.
- Support risk committee meetings, risk acceptance processes, exception reviews, and escalations.
- Prepare leadership updates, dashboards, and reports on risk exposure, remediation progress, and emerging concerns.
- Analyze KPIs and KRIs, identify trends, and contribute to risk quantification efforts.
- Map risk management activities to regulatory obligations and industry frameworks.
- Coordinate risk initiatives and remediation commitments with Security, Engineering, Product, IT, Legal, Procurement, and Finance.
- Support GRC tools, standardized workflows, automation solutions, and AI-enabled risk use cases with human oversight.
- Identify process gaps and recommend improvements to assessments, reporting, and program effectiveness.
View Full Description & ApplyYou'll be redirected to the employer's site
